648890 matches found
KLA91268 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of...
Fedora 44 : corosync (2026-e97124c200)
The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e97124c200 advisory. Fix CVE-2026-81666 and CVE-2026-81665 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...
PT-2026-87181
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via...
CVE-2026-16028 Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream_state never removes from the connection stream table
Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that streamstate never removes from the connection stream table. When a stream reaches the CLOSED state, streamstate returns the concurrency slot and clears most of the stream's keys, but the entry itself sta...
[SECURITY] [DSA 6488-1] jbig2dec security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6488-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 07, 2026 https://www.debian.org/security/faq -...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...
CVE-2026-86480
JetBrains Hub prior to version 2026.2.52442 is affected by a privilege escalation vulnerability. An unauthenticated attacker over the network could register a trusted service and subsequently gain superuser privileges , resulting in full compromise of confidentiality, integrity, and availability ...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...
EUVD-2026-72496
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...
CVE-2026-86480
In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges...
[SECURITY] [DSA 6487-1] strongswan security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6487-1 [email protected] https://www.debian.org/security/ Yves-Alexis Perez September 06, 2026 https://www.debian.org/security/faq -...
MAL-2026-16039 Malicious code in service-home (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in service-home (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ffce66fb482d77c6fcfcf9cf3ab50c0de30f856921f4a90f9de969212a2687f The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Security update for lcms2
This update for lcms2 fixes the following issue: CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:4056-1 Security update for lcms2
This update for lcms2 fixes the following issue: - CVE-2026-41254: Information disclosure or denial of service via integer overflow in CubeSize bsc1264994...
Security update for bzip2
This update for bzip2 fixes the following issue: CVE-2026-42250: off-by-one error in the bzip2recover utility when processing a specially crafted file can lead to a crash bsc1266786. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupda...
Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to Apache Neethi (CVE-2026-66142,CVE-2026-66143 & CVE-2026-66144)
Summary IBM App Connect Enterprise runtime is vulnerable to a denial of service due to Apache Neethi. Vulnerability Details CVEID:CVE-2026-66142 DESCRIPTION: Apache Neethi is vulnerable to uncontrolled recursion when parsing policies that lack policy Ids or with deeply nested structures, which ma...
CVE-2026-86319
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is...
CVE-2026-7861
Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service Management allows Code Injection. This issue affects CSM Customer Service Management: before 8.0.3...
DEBIAN-CVE-2026-18453
A flaw was found in 389 Directory Server. A missing NULL pointer check in the paged results handling of opsharedsearch allows an unauthenticated remote attacker to crash the LDAP server by sending a crafted sequence of search requests using the USEONEBACKEND control, resulting in denial of servic...